{
  "$schema": "http://cyclonedx.org/schema/bom-1.6.schema.json",
  "bomFormat": "CycloneDX",
  "specVersion": "1.6",
  "serialNumber": "urn:uuid:bf43472f-b721-5664-a883-036189d0b3a6",
  "version": 1,
  "metadata": {
    "tools": [
      {
        "name": "tuxcare-vex-generator",
        "version": "1.0.0"
      }
    ]
  },
  "components": [
    {
      "bom-ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4",
      "type": "library",
      "group": "io.netty",
      "name": "netty-parent",
      "version": "4.1.130.Final-tuxcare.4",
      "purl": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
    }
  ],
  "vulnerabilities": [
    {
      "bom-ref": "urn:uuid:c07ace5d-19cb-5bad-9b4a-441c2021b778",
      "id": "CVE-2025-55163",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2025-55163 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent. already_fixed \u2014 The target Netty 4.1.130.Final repository already contains the complete MadeYouReset (CVE-2025-55163) mitigation. The Http2MaxRstFrameLimitEncoder defense class is present, integrated into the HTTP/2 connection handler builder, and enabled by default for servers with a threshold of 200 RST_STREAM frames per 30-second window. All protocol-error-triggered RST writes route through the protected en..."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2357ffa4-d302-532c-a72d-df56d76cd605",
      "id": "CVE-2026-33870",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33870 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:df293347-156f-5e9c-9d9d-cb60820b7136",
      "id": "CVE-2026-33871",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-33871 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:5113db6d-5dc7-5ee7-8e68-923f2cf4322a",
      "id": "CVE-2026-41417",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-41417 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:d28f1e23-860f-5499-b6e4-8bdbb2674935",
      "id": "CVE-2026-42578",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42578 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:7630cc31-c225-5d7c-bb5a-6178ea64373c",
      "id": "CVE-2026-42579",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42579 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a205693b-fd32-512f-b257-0b74ed5f3e1d",
      "id": "CVE-2026-42580",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42580 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:eb924ed4-83b5-5b66-8fe2-0eded8ff1f2c",
      "id": "CVE-2026-42581",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42581 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:963b00a4-7c1e-5396-94b3-da0daa0a0ed5",
      "id": "CVE-2026-42583",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42583 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c44b79aa-2f89-5bca-82d8-133328a94f7b",
      "id": "CVE-2026-42584",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42584 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f7aacb14-2576-532b-b2d1-8d63778e0e34",
      "id": "CVE-2026-42585",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-42585 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:edf9f5d1-6741-53b9-86da-4091be96859f",
      "id": "CVE-2026-42586",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42586 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3f040606-77aa-5138-b88b-6568b74200ce",
      "id": "CVE-2026-42587",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-42587 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:01887010-78ff-5558-b8aa-d6bd3fe8ac0e",
      "id": "CVE-2026-44248",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44248 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:955bb710-2472-5cd2-a832-44f12696f7e7",
      "id": "CVE-2026-44249",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44249 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:caf8ce26-f4cb-5a9b-9edb-1ecade964f1e",
      "id": "CVE-2026-44250",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-44250 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:37900a80-3bff-5c90-8a63-afb17829d127",
      "id": "CVE-2026-44890",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44890 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0b80ae86-f809-5878-ae8a-021e95fc3597",
      "id": "CVE-2026-44891",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44891 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e083a262-1536-5689-adaf-2e6a64eca52e",
      "id": "CVE-2026-44893",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-44893 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:797c94dc-4063-5a9f-a40a-c3b985ee0f2c",
      "id": "CVE-2026-45416",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45416 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6f0e8fce-dab4-587b-9e1d-deed0f3b5180",
      "id": "CVE-2026-45536",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45536 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ddb5ed20-7f37-530b-a095-457e192ad6a6",
      "id": "CVE-2026-45673",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45673 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:86bb8bd2-aed7-51f7-a9fa-d7f83c993254",
      "id": "CVE-2026-45674",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-45674 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c20857d4-28de-5f33-b055-8143354fe507",
      "id": "CVE-2026-46340",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-46340 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:fd388b81-9576-5ee4-9381-86d31c24211f",
      "id": "CVE-2026-47244",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47244 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:96598bcb-6aa5-5897-b7df-074b14180700",
      "id": "CVE-2026-47691",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-47691 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:766ea639-f648-59c5-b340-665efefa505c",
      "id": "CVE-2026-48006",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48006 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:c301031e-d99b-59e3-98b9-d3e48e06771e",
      "id": "CVE-2026-48043",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48043 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:48885fc2-261f-5e72-9a4a-ad1c06d2978b",
      "id": "CVE-2026-48059",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-48059 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:929d047a-8a04-59ef-8130-742b91d55f33",
      "id": "CVE-2026-50010",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50010 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3b2435aa-84ec-52a8-b127-a1347821d78a",
      "id": "CVE-2026-50011",
      "analysis": {
        "state": "not_affected",
        "detail": "Vulnerability CVE-2026-50011 does not affect version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent. Patches already applied: bff98ee51b5d0b7ee25fd5005f2169f2a0467efa (already in target via d5b4e38845f5 'Backport CVE-2026-44890 to 4.1.130.Final')"
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:985a2aee-108e-5538-898c-0657a278ef7c",
      "id": "CVE-2026-50020",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50020 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f5fc3aec-f6dd-5a02-82ff-7273897b354c",
      "id": "CVE-2026-50560",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-50560 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cde2ab48-a9fd-5062-a1fe-73b42187afbb",
      "id": "CVE-2026-55831",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55831 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:cf0301de-0186-521f-95a2-2968b2b67c28",
      "id": "CVE-2026-55833",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55833 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:99c34f33-1b8e-540b-a702-f5fd5b9a2e3b",
      "id": "CVE-2026-55851",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-55851 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:9e2c65ee-5730-55f8-8830-d2bf09a27294",
      "id": "CVE-2026-56745",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56745 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1f321dc5-22cf-51c7-8725-d3280a8c7d10",
      "id": "CVE-2026-56746",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56746 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:59d90592-762e-5dac-933c-6097af9c81de",
      "id": "CVE-2026-56817",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56817 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:42124db2-2ba6-5b9c-8238-fa2536bd8998",
      "id": "CVE-2026-56818",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56818 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:0df729f4-bc5e-5f74-8740-855fbd66b718",
      "id": "CVE-2026-56819",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56819 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:f0668798-2d73-569c-854c-8be544e530d7",
      "id": "CVE-2026-56820",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56820 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:2f5cd703-ceb1-54b9-b21b-d061ecb2358e",
      "id": "CVE-2026-56821",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56821 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e0e7f2ab-52c5-5914-94c0-0deb6fe5169d",
      "id": "CVE-2026-56822",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-56822 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2125aa0-0e76-50e9-a578-5c152251fa42",
      "id": "CVE-2026-59898",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59898 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:97c4fff3-cf22-5a52-819d-05c4265d956d",
      "id": "CVE-2026-59899",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59899 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3e7378dd-7b6a-57fc-a08c-9ebd0fa9b896",
      "id": "CVE-2026-59900",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59900 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a8e59dd7-edb8-5eee-b174-f09d3b265b57",
      "id": "CVE-2026-59901",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59901 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:8389e11a-e670-5c32-ad8d-91bd76141c81",
      "id": "CVE-2026-59902",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59902 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:1bb7cb09-029d-56d1-a0b7-ce8186e89b77",
      "id": "CVE-2026-59903",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability CVE-2026-59903 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a2042e99-98e2-50d8-b92e-d5dfd45d34b7",
      "id": "CVE-2026-59919",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59919 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:ca7bb670-fc49-5357-bf9a-306ff3dae126",
      "id": "CVE-2026-59920",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59920 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:3c45096e-6742-596f-97a8-318da4cffac9",
      "id": "CVE-2026-59921",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-59921 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:e3fea04f-11b5-5dfd-b508-ac5dbd149aee",
      "id": "CVE-2026-73507",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73507 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:6d0e5c38-b5d6-57f2-be1b-3e7ba27d374f",
      "id": "CVE-2026-73508",
      "analysis": {
        "state": "resolved",
        "detail": "Vulnerability CVE-2026-73508 is fixed in version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:10f66a9e-7f5c-52ef-b10f-6adacbb64104",
      "id": "GHSA-mfg7-5gfp-c4w3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-mfg7-5gfp-c4w3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    },
    {
      "bom-ref": "urn:uuid:a678d34b-0daf-50bf-88c0-a3e6b0cba12c",
      "id": "GHSA-v74w-7mr3-4qg3",
      "analysis": {
        "state": "exploitable",
        "detail": "Vulnerability GHSA-v74w-7mr3-4qg3 affects version 4.1.130.Final-tuxcare.4 of io.netty:netty-parent."
      },
      "affects": [
        {
          "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
        }
      ]
    }
  ],
  "dependencies": [
    {
      "ref": "pkg:maven/io.netty/netty-parent@4.1.130.Final-tuxcare.4"
    }
  ]
}